<!DOCTYPE html>
<!-- Copyright 2023 The Chromium Authors
 Use of this source code is governed by a BSD-style license that can be
 found in the LICENSE file. -->
<html>
<body>
<!-- The action URL of this form is given as the query string in the page's URL,
 e.g.: http://127.0.0.1:port/insecure_form.html?http://target_url
-->
<form method=POST action="">
  <input type="text" name="username" id="username" value="testuser"><br>
  <input type="password" name="password" id="password" value="testpassword"><br>
  <input type="submit" value="submit" id="submit">
</form>
<script>
  window.onload = function() {
    // Extract the form's action URL from the query string.
    document.forms[0].action = window.location.search.substring(1);
    document.body.appendChild(document.createTextNode("Insecure form ready to submit"));
  }
</script>
</body>
</html>

